ZeroHour

CVE-2026-3035

CVSS 3.1
5.5 medium
EPSS
<1%p14
Published
()
Modified
Description

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have accessed the terminal of a protected environment they were not authorized to use due to improper authorization checks.

Vendors
gitlab
Products
gitlab
Weakness
CWE-288
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

In the news

No ingested article mentions this CVE yet.